DE.AE-02.293
Does your organization utilize log analysis tools to generate actionable reports from log data?
Explanation
Log analysis tools help organizations identify security incidents, system anomalies, and compliance issues by processing large volumes of log data into meaningful reports. These tools can detect patterns indicating potential security breaches, performance issues, or unusual user behaviors that might otherwise go unnoticed in raw logs. Acceptable evidence would include screenshots of log analysis dashboards (with sensitive information redacted), sample reports generated by the tools, documentation of the log analysis solution architecture, or procedures describing how reports are generated and distributed to relevant stakeholders.
Implementation Example
Use log analysis tools to generate reports on their findings
ID: DE.AE-02.293
Context
- Function
- DE: DETECT
- Category
- DE.AE: Adverse Event Analysis
- Sub-Category
- Potentially adverse events are analyzed to better understand associated activities

